Critical sectors may be asked to have a common cyber crisis management plan

The government may mandate all public and private companies in banking, telecom, power and energy, public health, and other sectors that deal with or possess critical information infrastructure to stick to a common ‘cyber crisis management plan’ when dealing with cybersecurity incidents of all kinds.

These organisations may have to undertake “mandatory internal and external information security audits” and report the findings of these audits to their respective sectoral regulator, as per the proposed national cybersecurity reference framework.

ET has seen a copy of the draft framework, which might be released soon for public consultation.